11005 matches found
PT-2019-11546
Name of the Vulnerable Software and Affected Versions: Linaro/OP-TEE versions prior to 3.4.0 Description: The issue is related to a rounding error in the optee os component, potentially leading to the leakage of code and/or data from previous Trusted Applications. Recommendations: For versions...
Intel Processor Diagnostic Tool elevation of privilege vulnerability (CNVD-2019-22204)
Intel Processor Diagnostic Tool IPDT is a processor function diagnostic tool from Intel USA. An elevation of privilege vulnerability exists in Intel IPDT versions prior to 4.1.2.24. An attacker can exploit this vulnerability to elevate privileges, disclose information, or cause a denial of servic...
PT-2019-2724 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The issue is related to errors in handling objects in memory by the Win32k component of the Windows operating system. This can allow an attacker to execute arbitrary code in kernel mode...
Ignited CMS Cross-Site Request Forgery Vulnerability (CNVD-2019-22258)
Ignited CMS is a content management system CMS. A cross-site request forgery vulnerability exists in index.php/admin/permissions in Ignited CMS on 2017-02-19 and prior versions, which stems from a networked system or product that does not adequately validate the origin or authenticity of data, an...
PT-2019-6133 · Docker · Docker Desktop Community Edition +1
Name of the Vulnerable Software and Affected Versions: Docker Desktop Community Edition versions prior to 2.1.0.1 Description: The issue is related to incorrect permission assignment for the docker-credential-wincred.exe file in the %PROGRAMDATA%DockerDesktopversion-bin folder. This could allow a...
CVE-2018-11424
There is Memory corruption in the web interface of Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than CVE-2018-11425...
Magento Authorization Issues Vulnerabilities
Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A security vulnerability exists in Magento version 2.1 prior to 2.1.18, version 2.2 prior to 2.2.9, and version 2...
Pulse Secure Pulse Connect Secure Input Validation Error Vulnerability
Pulse Secure Pulse Connect Secure a.k.a. PCS, formerly known as Juniper Junos Pulse is a suite of SSL VPN solutions from Pulse Secure in the United States. Pulse Secure Pulse Connect Secure 8.3R2. An input validation error vulnerability exists in the loginmeeting.cgi file in previous versions of...
PT-2019-12512 · Synology · Note Station
Name of the Vulnerable Software and Affected Versions: Synology Note Station versions prior to 2.5.3-0863 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the object id parameter. Recommendations: For versions prior to 2.5.3-0863, update...
PT-2019-12513 · Synology · Synology Office
Name of the Vulnerable Software and Affected Versions: Synology Office versions prior to 3.1.4-2771 Description: The issue is related to a cross-site scripting XSS vulnerability. This allows remote authenticated users to inject arbitrary web script or HTML. Recommendations: For versions prior to...
Magento Encryption Problem Vulnerability (CNVD-2020-52451)
Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions. A vulnerability exists in Magento Open Source versions prior to 1.9.4.2 and Magento Commerce versions prior to...
Magento Cross-Site Scripting Vulnerability (CNVD-2019-26215)
Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A cross-site scripting vulnerability exists in the admin panel in Magento Open Source versions prior to 1.9.4.2 a...
DEBIAN-CVE-2019-5831
Object lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
DEBIAN-CVE-2019-5786
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...
CVE-2018-6118
A double-eviction in the Incognito mode cache that lead to a user-after-free in cache in Google Chrome prior to 66.0.3359.139 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page...
CVE-2018-6142
Array bounds check failure in V8 in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file...
Information disclosure
Incorrect implementation in Content Security Policy in Google Chrome prior to 67.0.3396.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...
UBUNTU-CVE-2019-5831
Object lifecycle issue in V8 in Google Chrome prior to 75.0.3770.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
